Friday, May 8, 2009

Google fixed security issues with a new release of its stable version of Google Chrome browser-- then released a replacement shortly afterward to prevent a batch of crashes that turned up as well.

Chrome 1.0.154.64 emerged Tuesday and was intended to fix one criticalsecurity problem and one high-severity one. On Thursday, came 1.0.154.65 to fix a crash during startup that affected "a small percentage of users," said Google Chrome Program Manager Mark Larson.

With the first problem, an attacker under some circumstances could run attack software with the same privilege as the computer user.

With the second, an issue handling 2D graphics could potentially allow a specially crafted image to crash a tab and run an attacker's code within Chrome's sandbox security isolation system.